Skip to main content

Cimg CVE-2018-7589

HIGH
Double Free (CWE-415)
2018-03-01 cve@mitre.org
Information Disclosure Cimg
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 01, 2018 - 22:29 nvd
HIGH 7.8

DescriptionNVD

An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image.

AnalysisAI

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-415. An issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a crafted bmp image. Affected products include: Cimg.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Cimg

View all
CVE-2023-41484 HIGH POC
8.1 Sep 20

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file. Rate
CVE-2020-25693 HIGH POC
8.1 Dec 03

A flaw was found in CImg in versions prior to 2.9.3. Rated high severity (CVSS 8.1), this vulnerability is remotely expl
CVE-2024-26540 HIGH POC
7.8 Mar 15

A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_lo
CVE-2018-7641 HIGH POC
7.8 Mar 02

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2018-7640 HIGH POC
7.8 Mar 02

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2018-7639 HIGH POC
7.8 Mar 02

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2018-7638 HIGH POC
7.8 Mar 02

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2018-7637 HIGH POC
7.8 Mar 02

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2018-7588 HIGH POC
7.8 Mar 01

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2018-7587 HIGH POC
7.8 Mar 01

An issue was discovered in CImg v.220. Rated high severity (CVSS 7.8), this vulnerability is no authentication required,
CVE-2019-1010174 CRITICAL
9.8 Jul 25

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. Rated critical severity (CVSS 9.8), this vu
CVE-2022-1325 MEDIUM POC
5.5 Aug 31

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy heade

Same weakness CWE-415 – Double Free

View all
CVE-2014-0502 HIGH POC
8.8
CVE-2018-0101 CRITICAL POC
10.0
CVE-2023-25136 MEDIUM POC
6.5
CVE-2026-33824 CRITICAL POC
9.8
CVE-2014-1767 HIGH POC
7.2
CVE-2016-5768 CRITICAL POC
9.8
CVE-2016-5772 CRITICAL POC
9.8
CVE-2016-3132 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2018-7589 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy